#include "suricata-common.h"
#include "decode.h"
#include "detect.h"
#include "threads.h"
#include "datasets.h"
#include "detect-datarep.h"
#include "detect-parse.h"
#include "detect-engine.h"
#include "detect-engine-mpm.h"
#include "detect-engine-state.h"
#include "util-byte.h"
#include "util-debug.h"
#include "util-print.h"
#include "util-misc.h"
#include "util-path.h"

Include dependency graph for detect-datarep.c:

Macros
#define	PARSE_REGEX "([a-z]+)(?:,\\s*([\\-_A-z0-9\\s\\.]+)){1,4}"

Functions
int	DetectDatarepMatch (ThreadVars , DetectEngineThreadCtx , Packet , const Signature , const SigMatchCtx *)

void	DetectDatarepFree (DetectEngineCtx , void )

void	DetectDatarepRegister (void)

int	DetectDatarepBufferMatch (DetectEngineThreadCtx det_ctx, const DetectDatarepData sd, const uint8_t *data, const uint32_t data_len)

Detailed Description

Author: Victor Julien victo.nosp@m.r@in.nosp@m.linia.nosp@m.c.ne.nosp@m.t

Implements the datarep keyword

Definition in file detect-datarep.c.

Macro Definition Documentation

◆ PARSE_REGEX

#define PARSE_REGEX "([a-z]+)(?:,\\s*([\\-_A-z0-9\\s\\.]+)){1,4}"

Definition at line 45 of file detect-datarep.c.

Function Documentation

◆ DetectDatarepBufferMatch()

int DetectDatarepBufferMatch	(	DetectEngineThreadCtx *	det_ctx,
		const DetectDatarepData *	sd,
		const uint8_t *	data,
		const uint32_t	data_len
	)

Definition at line 68 of file detect-datarep.c.

References DATAREP_OP_EQ, DATAREP_OP_GT, DATAREP_OP_LT, DatasetLookupwRep(), DataRepResultType::found, DetectDatarepData_::op, DataRepResultType::rep, DetectDatarepData_::rep, DetectDatarepData_::set, and DataRepType::value.

Here is the call graph for this function:

◆ DetectDatarepFree()

void DetectDatarepFree	(	DetectEngineCtx *	de_ctx,
		void *	ptr
	)

Definition at line 365 of file detect-datarep.c.

References SCFree.

◆ DetectDatarepMatch()

int DetectDatarepMatch	(	ThreadVars *	,
		DetectEngineThreadCtx *	,
		Packet *	,
		const Signature *	,
		const SigMatchCtx *
	)

◆ DetectDatarepRegister()

void DetectDatarepRegister ( void )

Definition at line 52 of file detect-datarep.c.

References SigTableElmt_::desc, DETECT_DATAREP, SigTableElmt_::name, SigTableElmt_::Setup, sigmatch_table, and SigTableElmt_::url.

Referenced by SigTableSetup().

Here is the caller graph for this function:

Macros

Functions